WordPress Plugin Vulnerabilities

Enhanced Plugin Admin <= 1.15 - XSS

Description

The Enhanced Plugin Admin WordPress plugin was affected by a XSS security vulnerability.

Affects Plugins

Plugin icon
enhanced-plugin-admin
Fixed in 1.16

References

URL
https://plugins.trac.wordpress.org/changeset?reponame=&new=1637850%40enhanced-plugin-admin&old=1586594%40enhanced-plugin-admin

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
728b3862-df6b-4f65-a74e-39ee08c3ee62

Timeline

Publicly Published
2017-04-14 (about 8 years ago)
Added
2019-06-20 (about 6 years ago)
Last Updated
2019-06-20 (about 6 years ago)

Other

Published
Title
Published
2024-12-03
Title
Exhibit to WP Gallery <= 0.0.2 - Reflected XSS
Published
2025-04-11
Title
SKT Skill Bar < 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2021-07-03
Title
Forms < 1.12.3 - Authenticated Stored Cross-Site Scripting (XSS)
Published
2022-12-20
Title
WOOCS < 1.3.9.4 - Contributor+ Stored XSS
Published
2024-05-20
Title
WP Shortcodes Plugin < 7.1.6 - Contributor+ Stored XSS via su_members Shortcode